// For flags

CVE-2010-0787

samba: Race condition by mount (mount.cifs) operations

Severity Score

9.1
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file.

client/mount.cifs.c en mount.cifs en smbfs en Samba v3.0.22, v3.0.28a, v3.2.3, v3.3.2, v3.4.0, and v3.4.5 permite a usuarios locales montar un CIFS compartido en un punto de montaje arbitrario y ganar privilegios, a través de un ataque de enlace simbólico en un fichero del directorio del punto de montaje.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Attack Vector
Local
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
Attack Vector
Local
Attack Complexity
Low
Authentication
Single
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2010-03-02 CVE Reserved
  • 2010-03-02 CVE Published
  • 2024-08-07 CVE Updated
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-59: Improper Link Resolution Before File Access ('Link Following')
CAPEC
References (20)
URL Tag Source
http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=3ae5dac462c4ed0fb2cd94553583c56fce2f9d80 X_refsource_confirm
http://git.samba.org/?p=samba.git%3Ba=commit%3Bh=a0c31ec1c8d1220a5884e40d9ba6b191a04a24d5 X_refsource_confirm
http://www.securityfocus.com/bid/39898 Vdb Entry
http://www.vupen.com/english/advisories/2010/1062 Vdb Entry
https://bugzilla.redhat.com/show_bug.cgi?id=532940 X_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=558833 X_refsource_confirm
https://exchange.xforce.ibmcloud.com/vulnerabilities/55944 Vdb Entry
URL Date SRC
URL Date SRC
http://www.securityfocus.com/bid/37992 2023-11-07
https://bugzilla.samba.org/show_bug.cgi?id=6853 2023-11-07
URL Date SRC
http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034444.html 2023-11-07
http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034470.html 2023-11-07
http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html 2023-11-07
http://secunia.com/advisories/38286 2023-11-07
http://secunia.com/advisories/38308 2023-11-07
http://secunia.com/advisories/38357 2023-11-07
http://security.gentoo.org/glsa/glsa-201206-29.xml 2023-11-07
http://www.mandriva.com/security/advisories?name=MDVSA-2010:090 2023-11-07
http://www.ubuntu.com/usn/USN-893-1 2023-11-07
https://access.redhat.com/security/cve/CVE-2010-0787 2011-08-29
https://bugzilla.redhat.com/show_bug.cgi?id=577277 2011-08-29
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Samba
Search vendor "Samba"
 Samba
Search vendor "Samba" for product "Samba"
 3.0.22
Search vendor "Samba" for product "Samba" and version "3.0.22"
-
Affected
Samba
Search vendor "Samba"
 Samba
Search vendor "Samba" for product "Samba"
 3.0.28a
Search vendor "Samba" for product "Samba" and version "3.0.28a"
-
Affected
Samba
Search vendor "Samba"
 Samba
Search vendor "Samba" for product "Samba"
 3.2.3
Search vendor "Samba" for product "Samba" and version "3.2.3"
-
Affected
Samba
Search vendor "Samba"
 Samba
Search vendor "Samba" for product "Samba"
 3.4.0
Search vendor "Samba" for product "Samba" and version "3.4.0"
-
Affected
Samba
Search vendor "Samba"
 Samba
Search vendor "Samba" for product "Samba"
 3.4.5
Search vendor "Samba" for product "Samba" and version "3.4.5"
-
Affected